I guess blocking known tor realys is easy enough, but blocking unknown relays is not as easy. They could still be blocked, if traffic is being analysed with deep packet inspection. In that situation, I’m not entirely sure but, there are probably ways to obfuscate your traffic.
At the end of the day, 100% blocking tor is very difficult, but making tor too difficult to use for 99% of users is much easier.
The only foolproof way to completely block tor I can think of is to intranet your whole country, north korea style.
not hard at all if you’re the ISP
just flag any traffic originating from outside your registered addresses
I guess blocking known tor realys is easy enough, but blocking unknown relays is not as easy. They could still be blocked, if traffic is being analysed with deep packet inspection. In that situation, I’m not entirely sure but, there are probably ways to obfuscate your traffic.
At the end of the day, 100% blocking tor is very difficult, but making tor too difficult to use for 99% of users is much easier.
The only foolproof way to completely block tor I can think of is to intranet your whole country, north korea style.